RE: sophie not getting bagle-h
Max Kalika <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
This may not be the prettiest solution, but I just dropped the following in
my body_checks in postfix ... seems to stop the badness.
/^(archive\s+)?pass(word)?(\s+for\s+archive)?(:|\s+--)\s+\d{5}$/i
REJECT Message Rejected. Body matches W32/bagel-i/h virus.
/^\.+btw,\s+"\d{5}"\s+is\s+a\s+password\s+for\s+archive$/i
REJECT Message Rejected. Body matches W32/bagel-i/h virus.
/^\d{5}\s+--\s+archive\s+password$/i
REJECT Message Rejected. Body matches W32/bagel-i/h virus.
--
---max kalika
[email protected]
-lsit systems administrator
_______________________________________________
vtools mailing list
[email protected]
http://www.vanja.com/list/listinfo.cgi/vtools
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFARNq2bdToEMvDq3kRAuoDAKCKTm2mxLsfJFc4HyCM/JU3kj0CbgCeOuHI 2fI4mp1+xvEU1qVdhqRl4u8= =E59c -----END PGP SIGNATURE-----